CVE-2024-1141

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-1141
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1141.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-1141
Aliases
Downstream
Published
2024-02-01T14:21:37.758Z
Modified
2026-07-15T01:48:52.076362444Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Glance-store: glance store access key logged in debug log level
Details

A vulnerability was found in python-glance-store. The issue occurs when the package logs the access_key for the glance-store when the DEBUG log level is enabled.

Database specific 
{
    "cna_assigner": "redhat",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/1xxx/CVE-2024-1141.json",
    "cwe_ids": [
        "CWE-779"
    ]
}
References

Affected packages

Git / github.com/openstack/glance_store

Affected ranges

Type
GIT
Repo
https://github.com/openstack/glance_store
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e9217809e76d60ea48d3853d9edd817ee077296f
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.7.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.0.1a1
0.1.0
0.1.1
0.1.10
0.1.11
0.1.12
0.1.2
0.1.3
0.1.5
0.1.7
0.1.9
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.2.0
0.20.0
0.21.0
0.23.0
0.24.0
0.25.0
0.26.0
0.27.0
0.28.0
0.29.0
0.29.1
0.3.0
0.4.0
0.5.0
0.6.0
0.7.0
0.7.1
0.8.0
0.9.0
0.9.1
1.*
1.0.0
1.1.0
2.*
2.0.0
2.1.0
2.2.0
2.3.0
2.4.0
2.5.0
2.6.0
2.7.0
3.*
3.0.0
4.*
4.0.0
4.0.1
4.1.0
4.2.0
4.3.0
4.4.0
4.5.0
4.6.0
4.6.1
Other
ocata-em
queens-em

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1141.json"